topic Re: Disable harmful commands at databricks cluster/workspace level in Administration & Architecture

Disable harmful commands at databricks cluster/workspace level

PallaviVetal — Thu, 20 Jul 2023 11:41:38 GMT

Hi,

I want to prevent user from executing harmful commands like dbutils.fs.rm at cluster level/workspace level.

Can we do this in databricks? Are there any classes/APIs that we can override?

Re: Disable harmful commands at databricks cluster/workspace level

Vinay_M_R — Fri, 21 Jul 2023 11:14:47 GMT

Hi @PallaviVetal

Are you using Python or SQL in your notebook?

Regards,

Vinay M R

Re: Disable harmful commands at databricks cluster/workspace level

Vinay_M_R — Fri, 21 Jul 2023 11:32:16 GMT

Currently we do not have a way to disable harmful dbutils commands.

Re: Disable harmful commands at databricks cluster/workspace level

PallaviVetal — Fri, 21 Jul 2023 12:10:51 GMT

Both additionally scala also. Basically I want to override inbuilt functions like dbutils.fs.rm. For shell commands, I can disable harmful commands by simply removing execute permission. For scala, I found the jar which has implementation of dbutils.fs.rm but I am not sure how I can override this function

Re: Disable harmful commands at databricks cluster/workspace level

Vinay_M_R — Fri, 21 Jul 2023 13:09:40 GMT

Hi @PallaviVetal

Currently we do not have a way to disable harmful dbutils commands.

But you can try setting access controls to restrict users from performing any harmful operation: https://docs.databricks.com/security/auth-authz/access-control/index.html

Re: Disable harmful commands at databricks cluster/workspace level

Anonymous — Sun, 23 Jul 2023 04:52:06 GMT

Hi @PallaviVetal

We haven't heard from you since the last response from @Vinay_M_R , and I was checking back to see if her suggestions helped you.

Or else, If you have any solution, please share it with the community, as it can be helpful to others.

Also, Please don't forget to click on the "Select As Best" button whenever the information provided helps resolve your question.

Re: Disable harmful commands at databricks cluster/workspace level

Nikhil_2800 — Mon, 26 Feb 2024 11:01:42 GMT

Can We Embed this in topmost INIT file?

alias rm='echo "rm is disabled, please check with the admin."'

Re: Disable harmful commands at databricks cluster/workspace level

Nikhil_2800 — Wed, 28 Feb 2024 09:07:33 GMT

Hi ,
I got the similar kind of problem too.
I followed this
put chmod -x /bin/rm in init.sh in workspace and add it at cluster your cluster level init script or global init script.
this restricts the users to use rm command.

Regards,

Nikhil Srivastava

@PallaviVetal